Ethereal-users: Re: [Ethereal-users] ethereal display filter tcp.flags

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: Breen Mullins <bmullins@xxxxxxxxxx>
Date: 25 Jun 2002 12:45:58 -0700
On Tue, 2002-06-25 at 12:22, Gibson, Beth wrote:
> Folks,
> 
>   Does anyone know of a listing of the meanings of the values for the
> display filter, "tcp.flags" ? By trial and error, I figured out a few of
> them (0x04  gets you RST packets;  0x02 gets you SYN packets, etc), but I
> was wondering if there is a complete list available.  I'd like to filter for
> [PSH] and [PSH, ACK] packets .

Well, it's defined in the RFC. But you already have the information in
ethereal itself. Pick a TCP frame and expand the flags byte in the
middle pane of the display.

Cheers,

Breen

-- 
Breen Mullins
SQA Engineer 
Asante Technologies, Inc.
800-662-9686x323
<bmullins@xxxxxxxxxx>